klawlikula@klawlikula
🔍 Shodan on the sending IPs: • 15(.)204(.)173(.)184: OVH US LLC, United States; ports 111,80,1234,8181,22,25; 5+ CVEs e.g. CVE-2007-2768; tags self-signed
1001034
6 followersView on X
CVE-2007-2768(netapp / hci_management_node)
LOWCVSS 4.3 · MEDIUMSignal is active with 2 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords (OTP), a similar issue to CVE-2007-2243.
1.0/ 10 priority
Sources & remediation
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-200
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Are you affected?
If you run products in this scope, you should treat this CVE as relevant to your environment.
- hci_management_node
- hci_storage_node
- openssh
- solidfire
Threat summary
- 2 mentions across 1 observed day
What's happening
- 2 total mentions across 1 day
Affected systems
Products
hci_management_nodehci_storage_nodeopensshsolidfiresteelstore_cloud_integrated_storage
1 version affected across 5 products
Deep dive
Activity timeline2 mentions / 1d
Full discourse2 posts
- klawlikula@klawlikula
🔍 Shodan on the sending IPs: • 51(.)81(.)186(.)108: OVH US LLC, United States; ports 111,80,1234,22,25,443; 5+ CVEs e.g. CVE-2007-2768
10000196 followersView on X
CPE platform detail5 entries
5 of 5 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | netapp | hci_management_node | - | - | - |
| HW | netapp | hci_storage_node | - | - | - |
| App | netapp | solidfire | - | - | - |
| App | netapp | steelstore_cloud_integrated_storage | - | - | - |
| App | openbsd | openssh | - | - | - |